devopspolis secrets-replicator vulnerabilities

Latest devopspolis secrets-replicator CVEs

Newest publication first

1. CVE-2026-105165 devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment

   Published 2026-10-04

   Medium·CVSS 5.3

   A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_secret of the file src/handler.py of the component AssumeRole Handler. Such manipulation of the argument external_id leads to incorrect permission assignment. The...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.